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IN THE CLAIMS 

1 . (original) A method of providing high-security protection for an 
electronic informational resource, the program having a protected portion, the method 
comprising: 

encrypting high-security authorization information using a first fingerprint as a key 
to generate an encrypted high-security authorization information, the first fingerprint 
being computed based on the protected portion of the program; and 

upon a request to access the protected portion of the program, decrypting the 
encrypted high-security authorization information using a second fingerprint, the second 
fingerprint being computed based on the protected portion of the program. 

2. (original) The method according to claim 1 , wherein the first fingerprint 
and second fingerprint are one-way hashes computed from a portion of a memory 
where the protected portion of the secure program resides. 

3. (original) The method according to claim 1 , further comprising: 
authorizing a secure channel between the protected portion of the program and 

a data processing mechanism if and only if the decrypting is successful. 

4. (original) A method of establishing high-security protection for a data 
source using a program having a protected portion, the method comprising: 

receiving high-security authorization information that is used to establish 
protection for the data source; 
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computing a fingerprint based on the protected portion of the program; and 
encrypting high-security authorization information using the fingerprint. 

5. (original) The method according to claim 4, wherein the program is 
activated and the fingerprint is a message digest computed based on a portion of a 
memory where the protected portion of the activated program resides. 

6. (original) The method according to claim 4, wherein said high-security 
authorization information includes a password. 

7. (original) The method according to claim 4, wherein said high-security 
authorization information includes a token. 

8. (original) A method for high-security protection of a data source via a 
program, the program having a protected portion, the method comprising: 

upon activating the program, computing a fingerprint based on the protected 
portion of the program; and 

verifying that the protected portion of the program is not tampered through 
decrypting an encrypted high-security authorization information using the fingerprint. 

9. (currently amended) The method according to claim 8, further 
comprising: 

prior to activating the program, receiving low-security authorization information; 
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authenticating the low-security authorization information;!,] 

if said low-security authorization information is authenticated, allowing the 

activating of the program; and 

if said low-security authorization information is not authenticated, not activating 

the program. 

10. (original) The method according to claim 8, further comprising: 

if the protected portion of the program is not tampered, authorizing a secure 
channel between the protected portion of the secure program and a data processing 
mechanism, the data processing mechanism accessing information from the data 
source through the secure channel. 

1 1 . (currently amended) A method for secure data replication, 
comprising: 

activating a protected portion of a program, said protected portion replicating 
data stored in a first database in a second database; 

establishing a first secure session, between the protected portion and the first 
database to copy data from the first database, using a first fingerprint computed based 
on the protected portion; and 

establishing a second secure session, between the protected portion and the 
second database to replicate the data in the second database, using a second 
fingerprint socondfing e rpr i nt computed based on the protected portion. 
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1 2. (currently amended) The method according to claim 1 1 , wherein the 
first fingerprint is a first message digest and establishing a first secure session 
comprises: 

computing the first fingerprint from the protected portion of the program; 

decrypting an encrypted authorization information using the first thofirst 
fingerprint as a key; and 

if the encrypted authorization information is successfully decrypted, copying the 
data from the first database. 

1 3. (currently amended) The method according to claim 1 1 , wherein the 
second fingerprint is a second message digest and establishing a second secure 
session comprises: 

computing the second message digest from the protected portion of the 
program; 

decrypting an encrypted authorization information using the second fingerprint as 
a key; and 

if the encrypted authorization information is successfully decrypted,! , duplicating 
the data in the second database. 

14. (original) A system, comprising: 
a program having a protected portion; 

a high-security set up mechanism for establishing high-security protection to a 
data resource using the protected portion of the program based on encrypted high- 
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security authorization information generated using a fingerprint computed based on the 
protected portion of the program; and 

a high-security protection mechanism for enforcing high-security protection on 
the protected portion of the program using the encrypted high-security authorization 
information. 

15. (original) The system according to claim 14, wherein the protected 
portion includes an encryption function that computes the fingerprint based on the 
protected portion of the program. 

16. (original) The system according to claim 14, wherein the high-security 
set up mechanism comprises: 

an encryption mechanism for encrypting a high-security authorization information 
to generate, using the fingerprint as a key, the encrypted high-security authorization 
information; and 

an encrypted high-security authorization information storage for storing the 
encrypted high-security authorization information. 

1 7. (currently amended) The system according to claim 1 6, wherein the 
high-security protection mechanism comprises: 

a high-security information retrieval mechanism for accessing encrypted high- 
security authorization information from the encrypted high-security authorization 
information storage; and 
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a decryption mechanism for decrypting, using a second [another] fingerprint as a 
key, the encrypted high-security authorization information, a second [another] 
fingerprint being computed based on the protected portion of the program. 

18. (original) A computer program product including computer program 
code to cause a microprocessor to perform a method of providing high-security 
protection for a data resource , the program having a protected portion, the method 
comprising: 

encrypting high-security authorization information using a first fingerprint to 
generate an encrypted high-security authorization information, the first fingerprint being 
computed based on the protected portion of the program; and 

upon a request to access the protected portion of the program, decrypting the 
encrypted high-security authorization information using a second fingerprint, the 
second fingerprint being computed based on the protected portion of the program. 

19. (original) The computer program product according to claim 18, 
wherein the first fingerprint and second fingerprint are one-way hashes computed from 
a portion of a memory where the protected portion of the secure program resides. 

20. (original) The computer program product according to claim 18, the 
method further comprising: 

authorizing a secure channel between the protected portion of the program and 
a data processing mechanism if the decrypting is successful, the data processing 
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mechanism accessing the protected portion of the program through the secure channel. 

21 . (original) A computer program product including computer program 
code to cause a microprocessor to perform a method of establishing high-security 
protection for a data resource, the program having a protected portion, the method 
comprising: 

receiving high-security authorization information used to establish protection for 
the data resource; 

computing a fingerprint based on a protected portion of the program; and 
generating encrypted high-security authorization information using the fingerprint. 

22. (original) The computer program product according to claim 21 , 
wherein the program is activated and the fingerprint is a message digest computed 
based on a portion of a memory where the protected portion of the activated program 
resides. 

23. (original) The computer program product according to claim 21 , 
wherein said high-security authorization information includes a password. 

24. (original) A computer program product including computer program 
code to cause a microprocessor to perform a method for high-security protection of a 
data resource via a program, the program having a protected portion, the method 
comprising: 
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upon activating the program, computing a fingerprint based on the protected 
portion of the program; and 

verifying that the protected portion of the program is not tampered through 
decrypting an encrypted high-security authorization information using the fingerprint. 



25, (original) The computer program product according to claim 25, 
further comprising: 

prior to activating the program, receiving low-security authorization information; 

authenticating the low-security authorization information; 

if said low-security authorization information is authenticated, allowing the 
activating of the program; and 

if said low-security authorization information is not authenticated, not activating 
the program, computing a fingerprint and verifying that the protected portion of the 
program is tampered. 

26. (original) The computer program product according to claim 24, 
further comprising: 

if the protected portion of the program is not tampered, authorizing a secure 
channel between the protected portion of the secure program and a data processing 
mechanism, the data processing mechanism accessing information from the data 
resource through the secure channel. 
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27. (original) A computer program product including computer program 
code to cause a microprocessor to perform a method for secure data replication, the 
method comprising: 

activating a protected portion of a program, said protected portion replicating 
data stored in a first database in a second database; 

establishing a first secure session, between the protected portion and the first 
database to copy data from the first database, using a first fingerprint computed based 
on the protected portion; and 

establishing a second secure session, between the protected portion and the 
second database to replicate the data in the second database, using a second 
fingerprint computed based on the protected portion. 

28. (original) The computer program product according to claim 27, 
wherein the first fingerprint is a first message digest and establishing a first secure 
session comprises: 

computing the first fingerprint from the protected portion of the program; 
decrypting an encrypted authorization information using the first fingerprint as a 
key; and 

if the encrypted authorization information is successfully decrypted, copying the 
data from the first database. 

29. (currently amended) The computer program product according to 
claim 27, wherein the second fingerprint is a second message digest and establishing a 
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second secure session comprises [composes]: 

computing the second fingerprint from the protected portion of the program; 

decrypting an encrypted authorization information using the second fingerprint as 
a key; and 

if the encrypted authorization information is successfully decrypted, duplicating 
the data in the second database. 
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